ANCHOR TRADE LTD (hereinafter referred to as "we") has the following registered address and principal place of business. Our website domain is anchorte.com, and our contact email is customer@anchorte.com. We are a professional garment manufacturing company committed to providing our customers with high-quality garment products and related services.

We strictly comply with the EU General Data Protection Regulation (GDPR) and related data protection laws and regulations, and are committed to respecting and protecting the privacy and security of the personal data of all EU residents (hereinafter referred to as "data subjects") who interact with us. This policy aims to clearly and transparently inform you how we collect, process, store, transfer, and protect your personal data, as well as your related rights and how to exercise them.

Please carefully read this Privacy Policy before using our products or services (including but not limited to visiting our website, inquiring about product information, placing orders, participating in after-sales service, etc.). Your continued use of our products or services indicates that you have fully understood and agreed to all the contents of this policy.

I. Scope of Application

This Privacy Policy applies to the personal data of EU residents that we collect and process in all our business activities, including but not limited to: browsing data generated when you visit the anchorte.com website; personal information you provide when you consult or place orders with us through the website, email, or other channels; data you submit when participating in our market research and promotional activities; and personal data involved in our interactions with EU suppliers, partners, and employees.

II. Types of Personal Data We Collect

To achieve legitimate business purposes, we collect only the minimum personal data necessary to achieve those purposes (data minimization principle), mainly including the following categories:

• Identifiable Data: such as your name, gender, contact information (phone number, email address), company name (if you are purchasing on behalf of a company), etc., used to establish contact with you, confirm order information, and provide follow-up services.
• Contact and Delivery Data: such as your detailed address, postal code, recipient information, etc., used for the delivery, logistics tracking, and after-sales service of apparel products.
• Transaction and Order Data: This includes information such as the style, specifications, quantity, order amount, payment method, and transaction records of the clothing you purchase. This data is used for order fulfillment, settlement reconciliation, invoicing, and handling returns and exchanges.
• Website Browsing and Usage Data: This includes your IP address, browser type, access time, viewed webpage content, and click history. This data is collected through cookies and similar technologies to optimize website experience, analyze user behavior, and improve service quality (see the separate website description for relevant cookie policies).
• Communication and Feedback Data: This includes inquiries, complaints, and suggestions you send to us via email, online forms, etc., as well as our response records. This data is used to respond to your needs, resolve issues, and improve services.

III. Purpose and Legal Basis of Data Processing

Our processing of your personal data is based on the legal grounds stipulated by GDPR. The specific purposes and corresponding legal basis are as follows:

• Fulfilling Contractual Obligations: To fulfill the clothing purchase contract between you and us, including order confirmation, production arrangement, product delivery, and after-sales service. Legal Basis: Article 6, Paragraph 1(b) of the GDPR.
• Obtaining your consent: To send you marketing information such as new apparel product information, promotional activity notifications, and market research invitations; or to collect and process the aforementioned special categories of data. Legal basis: Article 6, paragraph 1(a) and Article 9, paragraph 2(a) of the GDPR. You may withdraw your consent at any time; please refer to Section VI, "Your Rights," of this policy for details on withdrawal procedures.
• Protecting our legitimate interests: To optimize our apparel product design, production processes, and service quality; to ensure the security of our website and information systems; and to prevent fraud and protect our legitimate rights and property. Legal basis: Article 6, paragraph 1(f) of the GDPR. We will ensure that the impact of such processing on your rights and freedoms is kept within a reasonable range.
• Fulfilling legal obligations: To comply with relevant EU and member state laws and regulations, including tax filing, financial auditing, and maintaining transaction records. Legal basis: Article 6, paragraph 1(c) of the GDPR.

IV. Data Recipients

To achieve the above data processing purposes, we may disclose your personal data to the following recipients, and will ensure that recipients comply with GDPR and related regulations, and take appropriate security measures:

• Service Providers: Including logistics and delivery companies (such as DHL, FedEx, etc.) for product delivery; payment processing institutions for order payment processing; IT service providers (such as website maintenance and data storage service providers) for ensuring website operation and data security; and marketing service providers for assisting in legitimate marketing activities (only with your consent).
• Regulatory and Judicial Authorities: We may disclose your personal data to relevant regulatory and judicial authorities in the EU and its member states when required by law or mandated by judicial rulings or judgments.
• Company Affiliates: We may disclose data to our wholly-owned subsidiaries, holding companies, and other affiliates for the purpose of integrating service resources and optimizing business management, provided that these affiliates comply with the requirements of this Privacy Policy.

V. Data Storage and Cross-Border Transfer

1. Storage Period: We will only store your personal data for the period necessary to achieve the data processing purposes described in this policy. After the storage period, your data will be promptly deleted or anonymized through secure means (such as encrypted deletion, physical destruction, etc.). Specific storage periods are as follows: Transaction and order data will be retained for 7 years from the date of order completion (in compliance with relevant tax and financial laws); your contact information and communication records will be retained for 3 years after your last interaction with us, unless you request early deletion; website browsing data will be retained for 1 year, and anonymized data can be used for business analysis and will no longer identify specific individuals.
2. Cross-Border Transfer: As our business may involve service providers outside the EU (such as production bases and IT service providers located in China), your personal data may be transferred outside the EU. For such transfers, we will strictly comply with the GDPR requirements for cross-border data transfer: if the receiving country obtains an "adequacy assessment" from the European Commission, the data can be transferred directly; if an adequacy assessment is not obtained, we will ensure that the security and protection level of your data during transmission and processing is no lower than the EU standard by signing EU Standard Contractual Clauses (SCCs), implementing data encryption, anonymization, and other appropriate safeguards. You can obtain detailed information on relevant protection measures by contacting our customer service email (customer@anchorte.com).

VI. Your Rights

In accordance with GDPR, you, as a data subject, have the following rights, and we will provide you with related services free of charge and will not discriminate against you for these rights:

• Right to Know: You have the right to know whether we are processing your personal data, and the purpose of the processing, data type, recipient, storage period, etc.
• Right to Access: You have the right to request a copy of your personal data and detailed information on the processing activities.
• Right to Correction: If you find that the personal data we process is inaccurate or incomplete, you have the right to request that we correct or supplement it promptly.
• Right to Erasure (Right to Be Forgotten): You have the right to request that we erase your personal data under specific circumstances as defined by GDPR.
• Right to Restrict Processing: You have the right to request us to restrict the processing of your personal data under specific circumstances.
• Right to Data Portability: You have the right to request us to provide your personal data in a structured, universal, and machine-readable format, and the right to transfer such data to other data controllers.
• Right to Object: If we process your personal data based on "legitimate interests" or "public interests," you have the right to object at any time.
• Right to Withdraw Consent: If you previously authorized us to process your personal data based on your consent, you have the right to withdraw your consent at any time.

If you wish to exercise any of the above rights, you can send a written request to our customer service email address (customer@anchorte.com) and provide the necessary identity verification information (such as name, contact information, order number, etc.). We will respond within one month of receiving the request (may be extended to three months for complex requests).

VII. Data Security Measures

We attach great importance to data security and adopt technical and management measures that comply with GDPR requirements to prevent your personal data from being accessed, used, disclosed, tampered with, damaged, or lost without authorization:

1. Technical Measures: Implement encryption technology (such as SSL/TLS encryption) for the website and data storage system; deploy security equipment such as firewalls and intrusion detection systems; regularly scan and update the system for security vulnerabilities; anonymize or pseudonymize sensitive data.
2. Management Measures: Establish a strict data access permission management system, allowing only authorized personnel to access necessary personal data; provide GDPR and data protection training to employees; develop a data breach emergency response plan and conduct regular drills.

In the event of a data breach that may affect your personal data security, we will report it to the relevant EU data protection regulatory authority within 72 hours; if the breach may pose a high risk to your rights and freedoms, we will immediately notify you through the contact information you provide.

VIII. Data Protection Officer (if applicable)

If our business involves large-scale systemic monitoring or large-scale processing of special categories of data, we will appoint a Data Protection Officer (DPO) in accordance with the law, responsible for overseeing the implementation of this policy. You can contact our DPO through our customer service email (customer@anchorte.com) for professional support regarding data protection.

IX. Complaint Channels

If you believe our processing of your personal data violates GDPR or relevant data protection laws and regulations, you may first submit a complaint to us via customer service email (customer@anchorte.com). If you are dissatisfied with our handling results, you have the right to file a complaint with the data protection regulatory authority of your member state.

X. Policy Updates and Notifications

We will periodically review and update this Privacy Policy based on changes in laws and regulations or business adjustments. The updated policy will be published prominently on the anchorte.com website. If the updates involve your core rights, we will notify you separately through website pop-ups, emails, etc.